2 matches found
Command injection
The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...
6.4CVSS7.2AI score0.01359EPSS
SaveExploits0References4Affected Software1
CVE-2008-2784
The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...
6.4CVSS6.9AI score0.01359EPSS
SaveExploits0References4
20